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DETAILED ACTION 

Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claims 1 to 6, 9 to 1 3, 1 8 to 1 9, 21 to 23, 25 to 27, 31 , 35 to 36, and 38 to 42 are 
rejected under 35 U.S.C. 102(e) as being anticipated by Ritter. 

Regarding independent claims 1, 9, and 31, Ritter discloses a method and 
system for authenticating persons, comprising: 

"a client system receiving first biometric data and having a first level security 
authorization procedure, wherein the first level security authorization denies access to 
the client system if the first biometric data does not correspond to an authorized user" - 
authentication of a user through a communication terminal device ("a client system") 
can be used to allow or refuse a user the usage of the communication terminal in 
correspondence with the result of the authentication, where the result of the 
authentication at a mobile communication terminal device can also be transmitted in a 
wireless manner (column 1 , line 65 to column 2, line 6: Figure 1); data recorded by 
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means of a microphone of a mobile radio telephone 1 is temporarily stored by the 
authentication program; from this data, current biometric keys are derived which are 
compared to biometric keys 4 stored in mobile radio telephone (column 4, lines 32 to 
38: Figure 1); 

"a server system receiving second biometric data and having a second level 
security authorization procedure" - a result of authentication by a mobile communication 
terminal device can also be transmitted in a wireless manner to an external secured 
device, which, for its part, can permit or refuse access to its building or services (column 
2, lines 2 to 6: Figure 1); in addition to a direct comparison at a mobile radio telephone 
1 , authenticity and integrity of the stored biometric keys 4 can be confirmed by means of 
trusted third party (UP) services by a biometric server 10 (column 4, lines 38 to 52: 
Figure 1); 

"wherein the first level security authorization procedure and the second level 
security authorization procedure comprise distinct biometric algorithms" - if the 
comparison of the current biometric key to the biometric key 4 stored in the SIM-card 3 
turns out to be positive and if the stored biometric keys 4 are authenticated positively by 
biometric server 10, further usage of the mobile radio telephone 1 may be granted 
(column 4, lines 38 to 52: Figure 1); thus, a first level security algorithm is performed at 
a client/terminal to compare biometric data of a user to biometric data on a user's card, 
and a second level security algorithm is performed at a server to compare biometric 
data of a user to biometric data of all valid users; further comparison prevents usage of 
fraudulent SIM-cards. 
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Regarding claims 2 to 4, Ritter discloses biometric data includes voice features 
(column 3, lines 7 to 10; column 4, line 31 to 35) and personal user profile passwords 
(column 3, lines 11 to 32). 

Regarding claims 5, 6, 10, and 11, Ritter discloses a first level security algorithm 
is performed at a client/terminal to compare biometric data of a user to biometric data 
on a user's card, and a second level security algorithm is performed at a server to 
compare biometric data of a user to biometric data of all valid users (column 4, lines 38 
to 52: Figure 1). 

Regarding claim 12, Ritter discloses a server automatically executes 
authentication again after a predetermined period (column 4, lines 48 to 52: Figure 1). 

Regarding claim 13, Ritter discloses that if comparison turns out to be positive, 
further usage of a mobile radio telephone may be permitted (column 4, lines 40 to 45: 
Figure 1); implicitly, permitting usage of a mobile radiotelephone involves "receiving 
control information" from an authentication program on mobile radio telephone to enable 
usage. 

Regarding claims 18 to 19, 21 to 23, and 35 to 36, Ritter discloses a personal 
user profile establishes levels of access rights to different services ("a plurality of server 
resources"; "a plurality of remote network resources"), and duration of validity to limit the 
validity of certain rights to specific duration of time or point in time (column 3, lines 17 to 
32: Figure 1); permission to use a mobile radio terminal, via a mobile network, may be 
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sustained for a limited time period ("allowable network connection time") (column 4, 
lines 47 to 52: Figure 1). 

Regarding claims 25 to 27, Ritter discloses storing biometric keys on a server 
(column 3, lines 40 to 47); biometric data can be voice features ("a digital voice print") or 
fingerprints (column 3, lines 7 to 10; column 4, lines 16 to 32: Figure 1). 

Regarding claims 38 to 41, Ritter discloses biometric data includes voice features 
(column 3, lines 7 to 10; column 4, line 31 to 35) and personal user profile passwords 
(column 3, lines 11 to 32); implicitly, authentication by voice features involves a speaker 
recognition algorithm. 

Regarding claim 42, Ritter discloses storing biometric keys on a personal SIM- 
card (column 1 , lines 46 to 53: Figure 1 ), which is a smart card. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 7, 8, 14 to 17, 24, and 32 to 34 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Ritter in view of Su et at. 

Concerning claims 7 and 8, Ritter does not expressly disclose security 
authorizations with a neural network and Hidden Markov Models. However, it is well 
known that speech recognition and verification algorithms utilize neural networks and 
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Hidden Markov Models as ways of performing speech recognition and verification. 
Specifically, Su et ai teaches creating speaker models by neural networks and Hidden 
Markov Models. (Column 6, Lines 1 to 10) It is would have been obvious to one having 
ordinary skill in the art to utilize neural networks and Hidden Markov Models as taught 
by Su et ai in the authentication method and system of Ritter because it is well known 
that these are the main algorithms for performing recognition and verification. 

Concerning claims 14 to 17 and 32 to 34, Ritter does not disclose control 
information comprising a verification confidence value, modifying an acceptance 
threshold, and prompting the user for additional information if verification confidence is 
in a first range. However, Su et ai teaches a security application, where a user can 
select a desired level of security and threshold levels are adjusted to accommodate the 
particular level of security desired. (Column 8, Line 59 to Column 9, Line 7: Figure 4) 
Pattern matching produces a particular score ("verification confidence value") for 
comparison and deciding whether to accept or reject a speaker. (Column 7, Lines 8 to 
23) A user is asked for more repetitions for higher levels of security. (Column 8, Line 
36 to Column 9, Line 39) Su et ai states an advantage is maintaining a high level of 
security that alleviates the problem of requiring the user to memorize passwords. 
(Column 1 , Lines 29 to 47) It would have been obvious to one having ordinary skill in 
the art to modify a threshold level in a speaker verification system as suggested by Su 
et ai in the authentication method and system of Ritter for the purpose of alleviating the 
problem of requiring the user to memorize passwords. 
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Concerning claim 24, Ritter discloses text-prompted speaker verification (column 
3, lines 59 to 67), which involves "an identification script to obtain identification 
information about the user". 

5. Claims 20 and 37 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Ritter in view of Gifford. 

Ritter discloses time limitations (column 3, lines 26 to 32; column 4, lines 48 to 
53), but does not specifically provide authorization criteria of spending amount 
limitations. However, Gifford teaches an open network payment system, where 
authentication is provided for spending limits for any duration of time so as to limit fraud 
risk. (Column 8, Line 65 to Column 9, Line 18) It would have been obvious to one 
having ordinary skill in the art to provide for spending limits as suggested by Gifford in 
the authentication method and system of Ritter for the purpose of limiting risk of fraud. 

6. Claims 28 to 30 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Ritter in view of Su et al. as applied to claim 9 above, and further in view of Maurer et a/. 

Su etal. suggests background noise conditions affect speaker verification 
(column 6, lines 60 to 67), changing recognition algorithms by varying the script (column 
8, lines 27 to 58), and changing recognition parameters by adjusting the threshold 
(column 8, line 59 to column 9, line 7). However, Su et al. omits changing recognition 
algorithms and recognition parameters based upon line quality measures. Maurer etal. 
teaches evaluating the quality of a transmission channel using voice recognition for the 
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purpose of providing a powerful and effective tool for testing applications. (Column 2, 
Lines 28 to 54) It would have been obvious to one having ordinary skill in the art to 
evaluate line quality as suggested by Maureret a/, to change recognition algorithms and 
recognition parameters as taught by Su et a/, for the purpose of providing a tool for 
testing and improving a speaker verification system due to changing background noise 
conditions. 

Response to Arguments 

7. Applicant's arguments filed 13 December 2004 have been considered but are 
moot in view of the new grounds of rejection. 

Conclusion 

8. The prior art made of record and not relied upon is considered pertinent to 
Applicant's disclosure. 

Crane et al. discloses related art. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Martin Lerner whose telephone number is (703) 308- 
9064. The examiner can normally be reached on 8:30 AM to 6:00 PM Monday to 
Thursday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Richemond Dorvil can be reached on (703) 305-9645. The fax phone 
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number for the organization where this application or proceeding is assigned is 703- 
872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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9/7/04 




Martin Lerner 
Examiner 
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